Cybercriminals have been distributing fake Android and Windows installers for Cyberpunk 2077 which installs ransomware called CoderWare onto devices. Malicious actors are distributing the game through installers, cracks for copyrighted software, and cheats.
A Kaspersky analyst discovered the Android ransomware which was disguised as a mobile version of Cyberpunk 2077. The game was being distributed on fake websites that were impersonating the Google Play Store. It was reported that the ransomware was using hardcoded keys, which means that a decryptor can be made if needed to recover the files for free.
